Josh Soref
565543a61b
spelling: elliptic
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 11:21:08 -04:00
Josh Soref
90b8781e6b
spelling: edge
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 11:21:08 -04:00
Josh Soref
7fd7d9c986
spelling: distinguish
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 11:21:08 -04:00
Josh Soref
165514c4ab
spelling: dispatcher
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 11:21:08 -04:00
Josh Soref
7b070bad86
spelling: decorated
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 11:21:08 -04:00
Josh Soref
9eaeafd4e5
spelling: decide
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 11:21:08 -04:00
Josh Soref
cce8a97545
spelling: cross
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 11:21:08 -04:00
Josh Soref
dc383007b1
spelling: credentials
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 11:21:08 -04:00
Josh Soref
3f74fa92ae
spelling: corresponding
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 11:21:08 -04:00
Josh Soref
d648886c55
spelling: context
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 11:21:08 -04:00
Josh Soref
6e905ce96f
spelling: connection
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 11:21:08 -04:00
Josh Soref
e3b85b15b6
spelling: compatibility
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 11:21:08 -04:00
Josh Soref
ac1c5221ef
spelling: attribute
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 11:21:08 -04:00
Josh Soref
f2fee60486
spelling: access
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 11:21:08 -04:00
Josh Soref
45d1e3f9b2
spelling: representation
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 10:56:41 -04:00
Josh Soref
124c5544cf
spelling: predicates
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 10:56:41 -04:00
Josh Soref
52a3e3c2fd
spelling: heuristic
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 10:56:41 -04:00
Josh Soref
5d94733078
spelling: ambiguously
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 10:51:25 -04:00
sylwia-budzynska
c33dd8fd4b
Merge branch 'main' into python-db-models
2022-10-13 16:48:50 +02:00
Anders Schack-Mulligen
f1634d3dca
Dataflow: Add support for C#/Python/Ruby/Swift.
2022-10-13 14:29:27 +02:00
Anders Schack-Mulligen
69bf13b1d4
Dataflow: Sync.
2022-10-13 14:19:12 +02:00
sylwia-budzynska
fec3ab7e01
Update Frameworks.qll
2022-10-13 12:46:20 +02:00
Sylwia Budzynska
5f737c82a4
Resolve confilct
2022-10-13 12:43:47 +02:00
Sylwia Budzynska
646c9b559b
Add tests
2022-10-13 12:36:57 +02:00
Sylwia Budzynska
e41d79e37d
Add python cx_oracle, phoenixdb, pyodbc models
2022-10-13 12:36:41 +02:00
Anders Schack-Mulligen
036724ce8d
Dataflow: Sync.
2022-10-13 11:03:30 +02:00
Erik Krogh Kristensen
10aab81f42
Merge pull request #10799 from jsoref/spelling-nfautils
...
ReDoS: Spelling nfautils
2022-10-12 23:09:06 +02:00
Josh Soref
09c8a98761
spelling: representation
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-12 15:20:26 -04:00
Josh Soref
bb1ce8973a
spelling: repeatable
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-12 15:20:24 -04:00
Josh Soref
adb8860b9b
spelling: pattern
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-12 15:20:24 -04:00
Josh Soref
98b317d1a5
spelling: escape
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-12 15:02:00 -04:00
Josh Soref
370da943dc
spelling: abcdefghijklmnopqrstuvwxyz
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-12 15:02:00 -04:00
Rasmus Lerchedahl Petersen
fb90089973
python: rewrite model for Aiohttp
2022-10-12 20:15:49 +02:00
Rasmus Lerchedahl Petersen
db616a526a
python: rewrite models using subscripts
...
more rewrites could be done to these models
for instance, I think the extra taint configuration could be removed,
but here I just wanted to illustrate the benefits of the new API graph.
2022-10-12 20:15:49 +02:00
Rasmus Lerchedahl Petersen
0b8e908823
Python: fix def nodes for subscript
...
We were using `getMember` for dictionaries, these are now getIndex
Also add convenience predicate for string keys
2022-10-12 20:13:48 +02:00
Jeroen Ketema
d389a183f0
Merge pull request #10743 from jsoref/spelling
...
Spelling
2022-10-12 12:48:22 +02:00
sylwia-budzynska
7bcd247128
Apply suggestions from code review
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2022-10-12 12:08:20 +02:00
Tom Hvitved
202549bdd9
Merge pull request #10758 from hvitved/ruby/type-tracking-level-step
...
Type tracking: Split up `levelStep` into `levelStepCall` and `levelStepNoCall`
2022-10-12 10:42:01 +02:00
Rasmus Wriedt Larsen
b3f10311b3
Merge pull request #10752 from RasmusWL/pymssql
...
Python: DB Modeling: Add `pymssql` and `executemany` in general
2022-10-11 15:55:04 +02:00
Sylwia Budzynska
319923f445
Add python cx_oracle, phoenixdb, pyodbc models
2022-10-11 15:29:57 +02:00
Erik Krogh Kristensen
66c2de87b0
Merge pull request #10729 from erik-krogh/py-last-msg
...
Py: fix some more style-guide violations in the alert-messages
2022-10-11 14:48:14 +02:00
Rasmus Wriedt Larsen
ac30cfa5c1
Python: Apply suggestions from code review
2022-10-11 14:05:27 +02:00
erik-krogh
a826dbbdee
fix capitalization in stack-trace-exposure
2022-10-11 13:59:10 +02:00
Tom Hvitved
7171fd1bb2
Update python/ql/lib/semmle/python/dataflow/new/internal/TypeTrackerSpecific.qll
...
Co-authored-by: Taus <tausbn@github.com >
2022-10-11 13:58:51 +02:00
Tom Hvitved
f1c44f72b5
Python: Sync on TypeTracker.qll changes
2022-10-11 13:58:50 +02:00
Tom Hvitved
d6df69d481
Merge pull request #10754 from hvitved/dataflow/non-hidden-succ-fast-tc
...
Data flow: Improve `fastTC` bound in `PathNodeImpl::getANonHiddenSuccessor`
2022-10-11 11:12:58 +02:00
erik-krogh
4da0508dae
Merge branch 'main' into py-last-msg
2022-10-11 10:49:19 +02:00
Josh Soref
704aba8c1c
spelling: necessitates
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-11 03:59:17 -04:00
Josh Soref
b95af76dab
spelling: although
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-11 00:23:35 -04:00
Josh Soref
21caa4b03f
spelling: across
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-11 00:23:35 -04:00